ron190 / jsql-injection

jSQL Injection is a Java application for automatic SQL database injection.
GNU General Public License v2.0
1.51k stars 416 forks source link

Unhandled IllegalArgumentException #95726

Open jsql-robot opened 1 month ago

jsql-robot commented 1 month ago
jSQL: v0.101
Java: v21.0.5-ea-amd64-en on OpenJDK Runtime Environment
OS: Linux (v6.10.9-amd64)
Desktop: undefined
Strategy: undefined
Db engine: MySQL
Exception on ThreadBeginInjection
java.lang.IllegalArgumentException: unsupported URI -lab4.web-security-academy_net/filter?category=--+-Bunc
    at java.net.http/jdk.internal.net.http.common.Utils.newIAE(Utils.java:326)
    at java.net.http/jdk.internal.net.http.HttpRequestBuilderImpl.checkURI(HttpRequestBuilderImpl.java:85)
    at java.net.http/jdk.internal.net.http.HttpRequestBuilderImpl.uri(HttpRequestBuilderImpl.java:71)
    at java.net.http/jdk.internal.net.http.HttpRequestBuilderImpl.uri(HttpRequestBuilderImpl.java:43)
    at com.jsql.model.InjectionModel.inject(InjectionModel.java:296)
    at com.jsql.model.AbstractModelObservable.injectWithoutIndex(AbstractModelObservable.java:54)
    at com.jsql.model.injection.strategy.blind.InjectionVendor.callUrl(InjectionVendor.java:162)
    at com.jsql.model.injection.strategy.blind.InjectionVendor.<init>(InjectionVendor.java:49)
    at com.jsql.model.suspendable.SuspendableGetVendor.lambda$run$2(SuspendableGetVendor.java:58)
    at java.base/java.util.stream.ForEachOps$ForEachOp$OfRef.accept(ForEachOps.java:184)
    at java.base/java.util.stream.ReferencePipeline$2$1.accept(ReferencePipeline.java:179)
    at java.base/java.util.stream.ReferencePipeline$2$1.accept(ReferencePipeline.java:179)
    at java.base/java.util.Spliterators$ArraySpliterator.forEachRemaining(Spliterators.java:1024)
    at java.base/java.util.stream.AbstractPipeline.copyInto(AbstractPipeline.java:509)
    at java.base/java.util.stream.AbstractPipeline.wrapAndCopyInto(AbstractPipeline.java:499)
    at java.base/java.util.stream.ForEachOps$ForEachOp.evaluateSequential(ForEachOps.java:151)
    at java.base/java.util.stream.ForEachOps$ForEachOp$OfRef.evaluateSequential(ForEachOps.java:174)
    at java.base/java.util.stream.AbstractPipeline.evaluate(AbstractPipeline.java:234)
    at java.base/java.util.stream.ReferencePipeline.forEach(ReferencePipeline.java:596)
    at com.jsql.model.suspendable.SuspendableGetVendor.run(SuspendableGetVendor.java:47)
    at com.jsql.model.injection.strategy.MediatorStrategy.testStrategies(MediatorStrategy.java:182)
    at com.jsql.model.injection.method.AbstractMethodInjection.testJsonlessParam(AbstractMethodInjection.java:179)
    at com.jsql.model.injection.method.AbstractMethodInjection.isParamInjectable(AbstractMethodInjection.java:156)
    at com.jsql.model.injection.method.AbstractMethodInjection.checkAllParams(AbstractMethodInjection.java:127)
    at com.jsql.model.injection.method.AbstractMethodInjection.testParameters(AbstractMethodInjection.java:78)
    at com.jsql.model.injection.method.AbstractMethodInjection.testParameters(AbstractMethodInjection.java:41)
    at com.jsql.model.InjectionModel.beginInjection(InjectionModel.java:172)
    at java.base/java.lang.Thread.run(Thread.java:1583)